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(54) Method and apparatus for encrypting contents information 



(57) A first-key signal representative of a first key is 
generated fronn first-key base information being a base 
of the first key. Contents information is encrypted into 
encryption-resultant contents Information in response to 
the first-key signal. A second-key signal representative 
of a second key is generated on the basis of Initial-value 
information of a given initial value according to a prede- 



termined key generation algorithm. The first-key base 
information Is encrypted into encryption-resultant first- 
key base infomnation in response to the second-key sig- 
nal. The encryption-resultant contents information, the 
encryption-resultant first-key base infomnation. the Ini- 
tial-value infonmation, and algorithm identification infor- 
mation for identifying the predetermined key generation 
algorithm are transmitted or recorded. 
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Description 

[0001] This Invention relates to a method of transmit- 
ting contents infomiation. Also, this Invention relates to 
a method of recording contents infomiation. in addition, 
this invention relates to an apparatus for transmitting 
contents information. Furthennore, this invention re- 
lates to an apparatus for recording contents infomiation. 
Also, this invention relates to a transmission medium. In 
addition, this invention relates to a recording medium. 
Furthenmore, this Invention relates to a method of de- 
crypting contents infonmation. Also, this invention re- 
\ lates to an apparatus for decrypting contents infonma- 
tion. 

[0002] Japanese published unexamined patent appii< 
cation 10-269289 discloses a system for managing the 
distribution of digital contents. In the system of Japa- 
nese application 10-269289, a distributor side encrypts 
and compresses digital contents into processing-result- 
ant digital contents. The distributor side transmits the 
processing-resultant digital contents, an encryption-re- 
sultant contents key, and encryption-resultant account- 
ing information to a communication opposite party. The 
distributor side Implements a process of receiving a 
charge on the basis of contents use infomiation trans- 
mitted from the communication opposite party. Then, 
the distributor side implements a process of dividing the 
received charge among interested persons including a 
copyrighit holder of the digital contents. On the other 
hand, a user side (a digital contents player) decrypts and 
expands the processing-resultant digital contents in re- 
sponse to the contents Icey, thereby reproducing the 
original digital contents. The user side subjects the ac- 
counting infomiation to a reducing process responsive 
to the use of the digital contents. The user side transmits 
the reduced accounting information and the contents 
use information to the distributor side. 
[0003] Japanese published unexamined patent appli- 
cation 10-283268 discloses a system in which a record- 
ing medium stores encryption-resultant main informa- 
tion, and also encryption-resultant infonmation repre- 
senting a l<ey for decrypting the encryption-resultant 
main information. Non-encrypted Information represent- 
ing conditions of decrypting the encryption-resultant 
main Information is added to the encryption-resultant 
Icey information. In more detail, the encryption-resultant 
key information has non-encrypted control information 
which contains device Information and region informa- 
tion. The control information is designed to prevent the 
encryption-resultant main information from being copied 
onto a magnetic recording medium or an optical disc in 
a user side for illegal use thereof. 
[0004] Generally, typical cryptosystems (encryption- 
decryption systems) are of a symmetric type and an 
asymmetric type. In the symmetric cryptosystem, a 
common key Is used by both an encryption side and a 
decryption side. On the other hand, the asymmetric 
cryptosystem uses a public key and a secret key. The 



symmetric cryptosystem is better than the asymmetric 
cryptosystem in data processing rate. 
[0005] In a known hybrid cryptosystem, an encryptton 
side encrypts contents Infonmation In response to a con- 

5 tents key according to a symmetric cryptography, and 
transmits the encryption-resultant contents information 
to a decryption side. In addition, the encryption side en- 
crypts the contents key according to an asymmetric 
cryptography, and transmits the encryption-resultant 

10 contents key to the decryption side. 

[0006] it is known to set a common master key in both 
an encryption side and a decryption side. In this case, 
an encryption side encrypts a contents key In response 
to the master key according to a symmetric cryptogra- 

is phy, and transmits the encryption-resultant contents key 
to the decryption side. 

[0007] In a prior-art symmetric cryptosystem using a 
contents key and a master key, both an encryption side 
and a decryption side know cryptographic algorithms 

^0 providing a cryptographic relation among a master key, 
a contents key, and contents infonmation. Accordingly, 
It is possible to make an imitation of the decryption side, 
that is, an illegal machine of the decryption side, only 
from knowledge of the encryption side. 

25 [0008] It is a first object of this Invention to provide an 
improved method of transmitting contents infonmation. 
[0009] it Is a secon d object of this invention to provide 
an improved method of recording contents information. 
[0010] it is a third object of this invention to provide 

30 an improved apparatus for transmitting contents infor- 
mation. 

[0011] It is a fourth object of this invention to provide 
an improved apparatus for recording contents informa- 
tion. 

35 [001 2] It is a fifth object of this Invention to provide an 
improved transmission medium. 

[0013] It is a sixth object of this invention to provide 
an Improved recording medium. 
[001 4] It is a seventh object of this invention to provide 
40 an improved method of decrypting contents Infonmation. 
[001 5] It is an eighth object of this invention to provide 
an improved apparatus for decrypting contents informa- 
tion. 

[001 6] A first aspect of this invention provides a meth- 
45 od of transmitting contents information. The method 
comprises the steps of generating a first-key signal rep- 
resentative of a first key from first-key base infonmation 
being a base of the first key; encrypting contents infor- 
mation into encryption-resultant contente information In 
50 response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value infonmation of a given initial value accord- 
ing to a predetenmined key generation algorithm; en- 
crypting the first-key base iniformation into encryption- 
55 resultant first-key base infonmation In response to the 
second-key signal; and transmitting the encryption-re- 
sultant contents information, the encryption-resultant 
first-key base infonmation, the initiai-vaiue infonmation, 
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and algorithm identification information for identifying 
the predetennfned key generation algorithm. 
[0017] A second aspect of this invention provides a 
method of recording contents infonmatlon. The method 
comprises the steps of generating a first-key signal rep- 
resentative of a first key from first-key base information 
being a base of the first key; encrypting contents infor- 
mation into encryption-resultant contents information in 
response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initiai-vaiue information of a given initial value accord- 
ing to a predetermined key generation algorithm; en- 
crypting the first-key b^e Information into encryption- 
resultant first-key base information in response to the 
second-key signal; and recording the encryption-result- 
ant contents Information, the encryption-resultant first- 
key base Infonmation, the Initial-value Infomiation. and 
algorithm identification Infomnation for Identifying the 
predetenmlned key generation algorithm. 
[001 8] A third aspect of this invention provides an ap- 
paratus for transmitting contents information. The appa- 
ratus comprises means for generating a first-key signal 
representative of a first key from first-key base infomna- 
tion being a base of the first key; means for encrypting 
contents Information into encryption-resultant contents 
infomnation in response to the first-key signal; means for 
generating a second-key signal representative of a sec- 
ond key on the basis of Initial-value infomiation of a giv- 
en initial value according to a predetermined key gen- 
eration algorithm; means for encrypting the first-key 
base infomnation into encryption-resultant first-key base 
infomnation in response to the second-key signal; and 
means for transmitting the encryption-resultant contents 
information, the encryption-resultant first-key base in- 
formation, the initial-value Information, and algorithm 
identification infomnation for identifying the predeter- 
mined key generation algorithm. 
[0019] A fourth aspect of this invention provides an 
apparatus for recording contents information. The ap- 
paratus comprises means for generating a first-key sig- 
nal representative of a first key from first-key base infor- 
mation being a base of .the first key; means for encrypt- 
ing contents infonmation into encryption-resultant con- 
tents information in response to the first-key signal; 
means for generating a second-key signal representa- 
tive of a second key on the basis of initial-value infor- 
mation of a given Initial value according to a predeter- 
mined key generation algorithm; means for encrypting 
the first-key base infomnation into encryption-resultant 
first-key base information in response to the second-key 
signal; and means for recording the encryption-resultant 
contents information, the encryption-resultant first-key 
base information, the Initial-value Infonmation, and algo- 
rithm identification infomnation for identifying the prede- 
termined key generation algorithm. 
[0020] A fifth aspect of this Invention provides a trans- 
mission medium for transmitting encryption-resultant 
contents information, encryption-resultant first-key base 



infonmation, initial-value infomnation, and algorithm 
identification information, wherein the encryption-result- 
ant contents Infonmation and the encryption-resultant 
first-key base infonmation are generated by the steps of 
s generating a first-key signal representative of a first key 
from first-key base infonmation being a base of the first 
key; encrypting contents infomnation into encryption-re- 
sultant contents information in response to the first-key 
signal; generating a second-key signal representative 

10 of a second key on the basis of initial-value information 
of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base 
information into encryption -resultant first-key base in- 
formation in response to the second-key signal; and 

IS wherein the algorithm identification Information is for 
identifying the predetermined key generation algorithm. 
[0021] A sixth aspect of this Invention provides a re- 
cording medium loaded with encryption-resultant con- 
tents infonmation, encryption-resultant first-key base In- 

20 formation, Initial-value infonmation, and algorithm iden- 
tification infonmation, wherein the encryption-resultant 
contents information and the encryption-resultant first- 
key base Infomnation are generated by the steps of gen- 
erating a first-key signal representative of a first key 

25 from first-key base Infonmation being a base of the first 
key; encrypting contents Infomnation into encryption-re- 
sultant contents infonmation in response to the first-key 
signal; generating a second-key signal representative 
of a second key on the basis of initial-value information 

30 of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base 
information into encryption-resultant first-key base in- 
formation In response to the second-key signal; and 
wherein the algorithm identification Information is for 

35 identifying the predetermined key generation algorithm. 
[0022] A seventh aspect of this invention is based on 
the third aspect thereof, and provides an apparatus 
wherein th e means for generating the secon d-key signal 
comprises a linear feedback shift register using a speo- 

40 ified in'educible primitive polynomial. 

[0023] An eighth aspect of this invention provides a 
method of transmitting contents information. The meth- 
od comprises the steps of generating a first-key signal 
representative of a first key from first-key base Infonma- 

^ tion being a base of the first key; encrypting contents 
information into encryption-resultant contents informa- 
tion In response to the first-key signal; generating a sec- 
ond-key signal representative of a second key on the 
basis of Initial-value Infonmation of a given Initial value 

^ according to a predetermined key generation algorithm; 
encrypting a part of the first-key base infonmation In re- 
sponse to the second-key signal to convert the first-key 
base Information into encryption-resultant tirst-key base 
infonmation; and transmitting the encryption-resultant 

S5 contents informatton, the encryption-resultant first-key 
base Infomnation. the Initial-value information, and algo- 
rithm Identification infomnation for Identifying the prede- 
tenmlned key generation algorithm. 
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[0024] A ninth aspect of this invention provides a 
method of recording contents infomiation. The method 
comprises the steps of generating a first-key signal rep- 
resentative of a first key from first-key base infomiation 
being a base of the first key; encrypting contents infor- 
mation into encryption-resultant contents infomiation in 
response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value information of a given initial value accord- 
ing to a predetemnined key generatton algorithm; en- 
crypting a part of the first-key base information in re- 
sponse to the second-key signal to convert the first-key 
base information into encryption-resultant first-key base 
Infonnation; and recording the encryption-resultant con- 
tents information, the encryption-resultant first-key base 
infonnation, the initial-value information, and algorithm 
identlfk:ation Information for identifying the predeter- 
mined key generation algorithm. 
[0025] A tenth aspect of this invention provides an ap- 
paratus for transmitting contents Infonnation. The appa- 
ratus comprises means for generating a first-key signal 
representative of a first key from first-key base Informa- 
tion being a base of the first key; means for encrypting 
contents infomiation into encryption-resultant contents 
infonnation in response to the first-key signal; means for 
generating a second-key signal representative of a sec- 
ond key on the basis of inttiai-value Information of a giv- 
en Initial value according to a predetermined key gen- 
eration algorithm; means for encrypting a part of the 
first-key base infonnation In responseto the second-key 
signal to convert the first-key base Infonnation Into en- 
cryption-resultant first-key base infonnation; and means 
for transmitting the encryption-resultant contents infor- 
mation, the encryption-resultant first-key base informa- 
tion, the initial-value infonnation. and algorithm identifi- 
cation information for Identifying the predetermined key 
generation algorithm. 

[0026] An eleventh aspect of this invention provides 
an apparatus for recording contents information. The 
apparatus comprises means for generating a first-key 
signal representative of a first key from first-key base 
information being a base of the first key; means for en- 
crypting contents Infonnation Into encryption-resultant 
contents information in response to the first-key signal; 
means for generating a second-key signal representa- 
tive of a second key on the basis of initial-value Infor- 
mation of a given initial value according to a predeter- 
mined key generation algorithm; means for encrypting 
a part of the first-key base infonnation In response to 
the second-key signal to convert the first-key base in- 
fonnation into encryption-resultant first-key base infor- 
mation; and means for recording the encryption-result- 
ant contents infonnation. the encryption-resultant first- 
key base infonnation. the initial-value infonnation, and 
algorithm identification Infonnation for Identifying the 
predetemnined key generation algorithm. 
[0027] A twelfth aspect of this invention provides a 
transmission medium for ti-ansmitting encryption-result- 



ant contents information, encryption-resultant first- key 
base infomiation, initial-value infonnation, and algo- 
rithm identification Information, wherein the encryption- 
resultant contents information and the encryption-re- 

5 sultant first-key base Information are generated by the 
steps of generating a first-key signal representative of 
a first key from first-key base information being a base 
of the first key; encrypting contents Information Into en- 
cryption-resultant contents infonnation In response to 

10 the first-key signal; generating a second-key signal rep- 
resentative of a second key on the basis of initial-value 
infonnation of a given initial value according to a prede- 
termined key generation algorithm; and encrypting a 
part of the first-key base infonnation in response to the 

15 second-key signal tq convert the first- key base informa- 
tion into encryption-resultant first-key base information; 
and wherein the algorithm identification infonnation Is 
for identifying the predetennined key generation algo- 
rithm. 

20 [0028] A thirteenth aspect of this invention provides a 
recording medium loaded with encryption-resultant con- 
tents information, encryption-resultant first- key base in- 
formation, initial-value information, and algorithm iden- 
tifteation information, wherein the encryption-resultant 

25 contents information and the encryptbn-resultant first- 
key base infonnation are generated by the steps of gen- 
erating a first-key signal representative of a first key 
from first-key base information being a base of the first 
key; encrypting contents information into encryption-re- 

30 sultant contents information In response to the first-key 
signal; generating a second-key signal representative 
of a second key on the basis of initial-vatue information 
of a given initial value according to a predetermined key 
generation algorithm; and encrypting a part of the first- 

35 key base information in response to the second-key sig- 
nal to convert the first-key base Information Into encryp- 
tion-resultant first- key base information; and wherein 
the algorithm identification information is for identifying 
the predetennined key generation algorithm. 

40 [0029] A fourteenth aspect of this invention is based 
on the tenth aspect thereof, and provides an apparatus 
wherein the means for generating the second-key signal 
comprises a linear feedback shift register using a spec- 
ified irreducible primitive polynomial. 

45 [0030] A fifteenth aspect of this Invention provides a 
method of decrypting encryption-resultant contents in- 
formation generated by an encrypting side whfch imple- 
ments the steps of generating a first-key signal repre- 
sentative of a first key from first-key base information 

50 being a base of the first key; encrypting contents Infor- 
mation into encryption -resultant contents Infonnation In 
response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value Infonnation of a given initial value accord- 

55 ing to a predetennined key generation algorithm; and 
encrypting the first-key base infonnation into encryp- 
tion-resultant first-key base infonnation in response to 
the second-key signal. The method comprises the steps 
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of identifying the predetermined key generation algo- 
rithm in response to algorithm identification information 
for identifying the predetenmined icey generation algo- 
rithm; generating a second-icey signal representative of 
a second Icey on the basis of the initial-value information 
and the identified key generation algorithm; decrypting 
encryption-resultant first-key base Information Into orig- 
inal first-key base infomiation in response to the sec- 
ond-key signal; generating a first-key signal represent- 
ative of a first key from the original first-key base Infor- 
mation; and decrypting encryption-resultant contents In- 
formation into original contents information In response 
to the first-key signal. 

[0031] A sixteenth aspect of this invention provides 
an apparatus for decrypting encryption-resultant con- 
tents information generated by an encrypting side which 
Implennents the steps of generating a first-key signal 
representative of a first key from first-key base infomna- 
tlon being a base of the first key; encrypting contents 
Infonnation into encryption-resultant contents infomna- 
tlon in response to the first-key signal; generating a sec- 
ond-key signal representative of a second key on the 
basis of Initial-value information of a given initial value 
according to a predetemiined key generation algorithm; 
and encrypting the first-key base infomiation into en- 
cryption-resultant first-key base infomfiation in response 
to the second-key signal. The apparatus comprises 
means for identifying the predetenmined key generation 
algorithm in response to algorithm identification infor- 
mation for identifying the predetennined key generation 
algorithm; means for generating a second-key signal 
representative of a second key on the basis of the Initial- 
value infonmation and the identified key generation al- 
gorithm; means for decrypting encryption-resultant first- 
key base infomiation into original first-key base Informa- 
tion in response to the second-key signal; means for 
generating a first-key signal representative of a first key 
from the original first-key base information; and means 
for decrypting encryption-resultant contents information 
into original contents inf omnation in response to the first- 
key signal. 

[0032] A seventeenth aspect of this invention is based 
on the sixteenth aspect thereof, and provides an appa- 
ratus wherein the Identifying means comprises means 
for selecting one from among a plurality of key genera- 
tion algorithnis in response to the algorithm identifica- 
tion infomiation as the identified key generation algo- 
rithm. 

[0033] An eighteenth aspect of this Invention Is based 
on the seventeenth aspect thereof, and provides an ap- 
paratus wherein the means for generating the second- 
key signal comprises a linear feedback shift register 
having a feedback object position which is set in accord- 
ance with a primitive polynomial In the Identified key 
generation algorithm. 

[0034] A nineteenth aspect of this invention provides 
a method of decrypting encryption-resultant contents in- 
fomiation generated by an encrypting side which Imple- 



ments the steps of generating a first-key signal repre- 
sentative of a first key from first-key base Information 
being a base of the first key; encrypting contents infor- 
mation into encryption-resultant contents Information in 
5 response to the first-key signal; generating a second- 
key signal representative of a second key on the basis 
of initial-value infomiation of a given initial value accord- 
ing to a predetemnined key generation algorithm; and 
encrypting a part of the first- key base infomiation In re- 
10 sponse to the second-key signal to convert the first-key 
base infonmation into encryption-resultant first-key base 
infomiation. The method comprises the steps of Identi- 
fying the predetemiined key generafion algorithm in re- 
sponse to algorithm Identification Information for Identi- 
'5 fying the predetenmined key generation algorithm; gen- 
erating a second-key signal representative of a second 
key on the basis of the initial-value information and the 
Identified key generation algorithm; decrypting encryp- 
tion-resultant first-key base Infomiation Into original 
first-key base Information in response to the second-key 
signal; generating a first-key signal representative of a 
first key from the original first-key base infomiation; and 
decrypting encryption-resultant contents information In- 
to original contents Infomnatlon in response to the first- 
key signal. 

[0035] A twentieth aspect of this invention provides 
an apparatus for decrypting encryption-resultant con- 
tents Infomiation generated by an encrypting side which 
implements the steps of generating a first-key signal 
representative of a first key from first-key base informa- 
tion being a base of the first key; encrypting contents 
information into encryption-resultant contents informa- 
tion in response to the first-key signal; generating a sec- 
ond-key signal representative of a second key on the 
basis of initial-value information of a given initial value 
according to a predetermined key generation algorithm; 
and encrypting a part of the first-key base information 
in response to the second-key signal to convert the first- 
key base infonnation into encryption-resultant first-key 
base information. The apparatus comprises means for 
identifying the predetermined key generation algorithm 
In response to algorithm Identification Infomiation for 
identifying the predetermined key generation algorithm; 
means for generating a second-key signal representa- 
tive of a second key on the basis of the initial-value in- 
formation and the identified key generation algorithm; 
means for decrypting encryption-resultant first-key base 
information into original first-key base information in re- 
sponse to the second-key signal; means for generating 
a first-key signal representative of a first key from the 
original first-key base information; and means for de- 
crypting encryption-resultant contents information into 
original contents infonmation in response to the first-key 
signal. 

[0036] A twenty-first aspect of this Invention Is based 
on the twentieth aspect thereof, and provides an appa- 
ratus wherein the identifying means comprises means 
for selecting one from among a plurality of key genera- 
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tion algorithms in response to the algorithm Identifica- 
tion Information as the identified key generation algo- 
rithm. 

[0037] A twenty-second aspect of this invention is 
based on the twenty-first aspect thereof, and provides 
an apparatus wherein the means for generating the sec- 
ond-key signal comprises a linear feedback shift register 
having a feedback object position which Is set in accord- 
ance with a primitive polynomial in the identified key 
generation algorithm. 

[0038] Rg. 1 is a block diagram of a system for con- 
tents infomnation according to an embodiment of this in- 
vention. 

[0039] Fig. 2 is a block diagram of a key generator in 
a primary side of the system In Fig. 1 . 
[0040] Fig. 3 is a diagram of a reference table repre- 
sented by data stored in a memory in a secondary side 
of the system in Fig. 1 . 

[0041] There now follows a description of the pre- 
ferred embodiment 

[0042] Fig. 1 shows a system for contents information 
according to an embodiment of this invention. The sys- 
tem of Fig. 1 includes a primary section P, a secondary 
section Q, and an intermediate section R. The primary 
section P and the secondary section Q are connected 
to each other via the intermediate section R. 
[0043] The primary section P includes an information 
recording apparatus or an infomnation transmitting ap- 
paratus. The secondary section Q includes an informa- 
tion reproducing apparatus or an information receiving 
apparatus. An example of the information reproducing 
apparatus is an infomnation player. The intermediate 
section R includes a recording medium or a transmis- 
sion medium. Examples of the recording medium are a 
magnetic recording medium, an optical recording medi- 
um, and a semiconductor memory. Examples of the 
transmission medium are an optical fiber cable, electric 
wires, and a radio transmission line. The transmission 
medium is also referred to as a transmission tine. 
[0044] The primary section P includes a key generator 
1 and encryptors 2 and 3. The encryptor 3 receives tn- 
fomriation being a base of a first key (a contents key). 
The first-key base information Is fed from a suitable de- 
vice (not shown). In addition, the encryptor 3 receives 
contents information from a suitable device (not shown). 
The encryptor 3 has a calculating block and an encrypt- 
ing block. The calculating block in the encryptor 3 gen- 
erates a signal (data) representative of the first key from 
the first-key base infomnation. The encrypting block in 
the encryptor 3 encrypts the contents infomnation into 
encryption-resultant contents infomnation in response to 
the first-key signal. The encryptor 3 outputs the encryp- 
tion-resultant contents information to the Intermediate 
section R. The encryption by the encryptor 3 may be 
based on a known encryption algorithm such as DES. 
[0045] Specifically, the primary section P records the 
encryption-resultant contents infomnation on the record- 
ing medium of the intermediate section R, or transmits 



the encryption-resultant contents information to the 
transmission line of the intemnediate section R. 
[0046] The key generator 1 receives infomnation rep- 
resentative of an initial value from a suitable devtoe (not 
5 shown). The key generator 1 produces a signal repre- 
sentative of a second key from the initial-value informa- 
tion according to a key generation algorithm. The key 
generator 1 outputs the second-key signal to the encryp- 
tor 2. 

[0047] The encryptor 2 receives the first-key base In- 
fomnation. The encryptor 2 encrypts the first-key base 
Infomnation into encryption-resultant first-key base in- 
fomnation in response to the second-key signal. The en- 
cryptor 2 outputs the encryption-resultant first-key base 
infomnation to the intemnediate section R. The encryp- 
tion by the encryptor 2 may be based on a known en- 
cryption algorithm such as DES. 
[0048] Specifically, the primary section P records the 
encryption-resultantf irst-key base infonmation on the re- 
cording medium of the intemnediate section R, or trans- 
mits the encryption-resultant first-key base infomnation 
to the transmission line of the intemnediate section R. 
[0049] The encryptor 2 may encrypt a part of the first- 
key base infomnation In response to the second-key sig- 
nal. For example, the encryptor 2 encrypts only an im- 
portant portion of the first-key base infomnation. Alter- 
natively, the encryptor 2 may encrypt the whole of the 
first-key base information. 

[0050] The primary section P outputs the initial-value 
infomnation to the intemnediate section R. Specifically, 
the primary section P records the initial-value informa- 
tion on the recording medium of the intermediate section 
R, or transmits the initial-value information to the trans- 
mission line of the intermediate section R. 
[0051] Information representative of an Identification 
(ID) number of the key generation algorithm used by the 
key generator 1 is available in the primary section P. For 
example, the algorithm-number infomnation is fed from 
a suitable device (not shown). The primary section P 
outputs the algorithm-number information to the inter- 
mediate section R. Specifically, the primary section P 
records the algorithm-number Information on the re- 
cording medium of the intemnediate section R, or trans- 
mits the algorithm-number information to the transmis- 
sion line of the intermediate section R. 
[0052] Preferably, the primary section P has a multi- 
plexer which combines the algorithm-number informa- 
tion, the initial-value infomnation, the encryption-result- 
ant first-key base Infomnation. and the encryption-result- 
ant contents Infomnation into multiplexing-resultant In- 
fomnation of a predetemnlned fomnat. In this case, the 
primary section P outputs the multiplexing-resultant in- 
fomnation to the intermediate section R. Specifically, the 
primary section P records the multiplexing-resultant in- 
fomnation on the recording medium of the Intennnediate 
section R, or transmits the multiplexing-resultant infor- 
mation to the transmission line of the intemnediate sec- 
tion R. 
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[0053] The primary section P may include signal con- 
verters which change the algorithm-number infonmation 
and the initial-value infomriatlon according to predeter- 
mined functions. In this case, the primary section P out- 
puts the change-resultant algorithm-number Infonma- 5 
tion and the change-resultant Initial-value infonmation to 
the Intenmediate section R. Speclficatly, the primary sec- 
tion P records the change-resultant algorithm-number 
infonnation and the change-resultant initial-value infor- 
mation on the recording medium of the intermediate io 
section R, or transmits the change-resultant algorithm- 
number infonmation and the change-resultant initial-val- 
ue Information to the transmission line of the Intemnedi- 
ate section R. 

[0054] The second key produced by the key generator /5 
1 acts as a higher-rank key with respect to the first key 
(the contents key). Preferably, the second key is de- 
signed to change randomly and greatly in response to 
the initial value. 

[0055] The key generator 1 includes a circuit having 20 
N bits, where N denotes a predetermined natural 
number. Fig. 2 shows an example of the key generator 
1 . In the key generator 1 of Fig. 2, an included circuit 
has 8 bits, and thus N = 8. 

[0056] The key generator 1 in Fig. 2 includes 1 -bit shift 25 
registers r1 -r8, AND gates gl-g8, Exclusive-OR gates al- 
a7, a signal converter 1A, and multi-bit (8-blt) buses 1B 
and 1C. The shift registers ri-r8, the AND gates gl-g8. 
and the Excluslve-OR gates al-a7 are combined to form 
a linear feedback shift register (LFSR) having 8 bits (N 30 
= 8). 

[0057] The shift registers rl-r8 are connected In a lin- 
ear array or a series array. Setting terminals of the shift 
registers ri-rS are connected to bit lines of the bus 1 B, 
respectively. First Input temriinals of the AND gates gl- 35 
g8 are connected to bit lines of the bus 1 C, respectively. 
Second input terminals of the AND gates g1 -g8 are con- 
nected to the output temilnals of the shift registers r1 -rS, 
respectively. The output terminals of the AND gates gl- 
g7 are connected to first input terminals of the Exclusive- 40 
OR gate a1-a7, respectively. The output terminal of the 
AND gate g8 is connected to a second input terminal of 
the Exclusive-OR gate a7. The output tenmlnal of the 
Exclusive-OR gate a7 is connected to a second Input 
tenminal of the Exclusive-OR gate a6. The output termi- 43 
nal of the Exclusive-OR gate a6 is connected to a sec- 
ond input temninal of the Exclusive-OR gate aS. The out- 
put temninal of the Exclusive-OR gate aS is connected 
to a second input tenminal of the Exdusive-OR gate a4. 
The output tenminal of the Exclusive-OR gate a4 Is con- so 
nected to a second input terminal of the Exclusive-OR 
gate a3. The output terminal of the Exclusive-OR gate 
aS is connected to a second input terminal of the Exclu- 
slve-OR gate a2. The output temninal of the Exclusive- 
OR gate a2 Is connected to a second input terminal of ss 
the Excluslve-OR gate al. The output terminal of the Ex- 
cluslve-OR gate al is connected to the input tenminal of 
the shift register r1 . The input tenminal of the signal con- 



verter 1 A is connected to the output tenminal of the shift 
register r8. The output tenminal of the signal generator 
1 A leads to the encryptor 2 (see Rg. 1 ). 
[0058] Bits of the infonmation representative of the in- 
itial value are fed via the bus 1 B to the shift registers 
r2-r8, respectively. The bits of the initial-value infonma- 
tion are set in the shift registers r2-r8, respectively. At 
least one of the bits of the Initial-value Infonmation differs 
from "O". Bits of Information representative of a coeffi- 
cient are fed via the bus 1 C to the first Input terminals 
of the AND gates gl-g8, respectively. Each of the AND 
gates g!-g8 assumes a closed state or an open state (a 
conductive state or a non-conductive state) in accord- 
ance the logic state of a related bit of the coefficient 
information. Thereafter, a clock signal is fed from a suit- 
able device (not shown) to the shift registers ri-r8 so that 
1 -bit signals are moved in the shift-register array toward 
the signal converter 1A. Open ones (conductive ones) 
of the AND gates gl -gB conduct the output signals from 
related shift registers to related Exclusive-OR gates. 
The positions of open ones of the AND gates gl-g8 cor- 
respond to positions in the shift-register array from 
which 1 -bit signals are fed back. The positions of open 
ones of the AND gates gi-g8 are detenmined by the co- 
efficient Infonmation. On the other hand, closed ones 
(non-conductive ones) of the AND gates gl-g8 output "0" 
signals to related Exclusive-OR gates, and do not con- 
duct the output signals from related shift registers to the 
related Exclusive-OR gates. The Excluslve-OR gates 
a1-a7 execute Exclusive-OR operation with respect to 
the output signals from the AND gates gl-g8. A final re- 
sult of the Excluslve-OR operation Is fed back from the 
lowest-place Excluslve-OR gate al to the input terminal 
of the lowest-ptace shift register ri. The output signal 
from the highest-place shift register r8 is an maximum 
length code signal. 

[0059] The signal converter 1A receives the maxi- 
mum length code signal from the highest-place shift reg- 
ister r8. The signal converter 1 A changes the maximum 
length code signal Into the second-key signal according 
to a predetermined nonlinear function based on, for ex- 
ample, a nonlinearity of a multiplier The signal converter 
1 A outputs the second-key signal to the encryptor 2 (see 
Rg. 1). 

[0060] Preferabiy, the coeffk:ient, the infonmation of 
which is fed to the AND gates gl-g8. conresponds to a 
specified N-order irreducible primitive polynomial. The 
following 8-order primitive polynomial is taken as an ex- 
ample. 

X^-HX^ + X^-l-X+l (1) 

In the case of the polynomial (1), the coefficient infor- 
mation has bits being "1", M". "O". "0", "0-, "0". "1", and 
"1" respectively. In this case, "r, "1", "0", "0", "0", "O". 
"1 and "1 " are fed to the AND gates g8, g7, g6. g5. g4. 
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g3, g2, and g1, respectively. 

[0061] A specified primitive polynomial corresponding 
to the coefficient infonmation defines a key generation 
algorithm used in the key generator 1 . Accordingly, the 
tdenttfteation number (the ID number) of the key gener- 
ation algorithm is uniquely determined for the specified 
primitive polynomial. 

[0062] The algorithm-number information, the Initial- 
value information, the encryption-resultant first-key 
base infonmation, and the encryption-resultant contents 
infomriation are transmitted from the primary section P 
to the secondary section Q through the intemiediate 
section R. 

[0063] The secondary section Q includes a memory 
4, a key generator 5, and decrypting devices 6 and 7. 
The memory 4 uses, for example, a ROM. The memory 
4 stores data representing a reference table of algorithm 
identifteation (ID) numbers, coefficients, and primitive 
polynomials. The reference table is designed to identify 
a key generation algorithm (a coefficient) from algo- 
rithm-number information. In the reference table, the co- 
efficients are located at different addresses determined 
by the algorithm ID numbers, respectively. Similariy, the 
primitive polynomials are located at different addresses 
determined by the algorithm ID numbers, respectively. 
[0064] Fig. 3 shows an example of the reference table 
in the memory 4. In the reference table of Fig. 3, the 
algorithm ID number "0" is assigned to a coefficient hav- 
ing bits equal to "I". "1", "0", "0", "0", "0", "1", and "1". 
Thus, the algorithm ID number '*0" is assigned to the pol- 
ynomial "x^ + x^ + x2 + X + 1 The algorithm ID number 
"1" is assigned to a coefficient having bits equal to "1". 
"0", -0", "0". "1", "1", "1", and "0". Thus, the algorithm ID 
number "1" Is assigned to the polynomial "x^ + x* + x^ 
+ x2 + 1". The algorithm ID number "2" Is assigned to a 
coefficient having bits equal to "1", "0", "1", "1". "0", 'T, 
"0", and "0". Thus, the algorithm ID number "2" is as- 
signed to the polynomial "x^ + + + + 1". The 
algorithm ID number "3" Is assigned to a coefficient hav- 
ing bits equal to "1", "1", "1", "1". "0", "0", "1", and "1". 
Thus, the algorithm ID number "3" is assigned to the pol- 
ynomial "X® + x7 + x® + x5 + x2 + X + 1". The algorithm 
ID number "4" is assigned to a coeffteient having bits 
equal to T , "0", "0", "1 "0", "1 "0", and "1 Thus, the 
algorithm ID number "4" is assigned to the polynomial 
"xQ + x5 + x3 + X 4- 1". The algorithm ID number "5" is 
assigned to a coefficient having bits equal to "1", "0", 
"1", "r, "0". -0", and "0". Thus, the algorithm ID 
number "5" is assigned to the polynomial 'x® + x® + x* 
+ x2 + 1". The algorithm ID number "6" is assigned to a 
coeffbient having bits equal to "1", "0", "1". "I", "0", "0", 
"O", and "r. Thus, the algorithm ID number "6" is as- 
signed to the polynomial "x^ + x® + x^ + x + 1". The al- 
gorithm IDnumber"/" is assigned to a coefftoient having 
bits equal to "1", "O". "1 "0-, "1 ", "1 " 1 and "1 Thus, 
the algorithm ID number "7" is assigned to the polyno- 
mial V + + x^ + x3 + x2 + X + r . 
[0065] The memory 4 receives the algorithm-number 



information from the intennediate section R. The re- 
ceived algorithm-number infomiatlon is used as an ad- 
dress signal, and the reference table In the memory 4 is 
accessed in response to the address signal. As a result, 
5 a coefficient and a primitive polynomial corresponding 
to the received algorithm-number Information are iden- 
tified. In other words, a key generation algorithm corre- 
sponding to the received algorithm-number information 
is identified. The memory 4 outputs Information of the 
10 identified coefficient to the key generator 5. 

[0066] The key generator 5 is simitar in design and 
ojDeratlon to the key generator 1 of the primary section 
P. The key generator 5 receives the Initial-value infor- 
mation from the intermediate section R. The key gener- 
is ator 5 reproduces the second-key signal from the Initial- 
value information and the coefficient information. The 
key generator 5 outputs the reproduced second-key sig- 
nal to the decrypting device 6. 

[0067] The decrypting device 6 receives the encryp- 

20 tion-resultant first-key base information from the Inter- 
mediate section R. Operation of the decrypting device 
6 is inverse with respect to that of the encryptor 2 in the 
primary section P. The decrypting device 6 decrypts the 
encryption-resultant first-key base infonmation Into the 

25 first-key base information in response to the second-key 
signal. The decrypting device 6 outputs the first-key 
base infonmation to the decrypting device 7. 
[0068] The decrypting device 7 receives the encryp- 
tion-resultant contents information from the intermedi- 

30 ate section R. Operation of the decrypting device 7 is 
inverse with respect to that of the encryptor 3 in the pri- 
mary section P. The decrypting device 7 has a calculat- 
ing block and a decrypting block. The calculating block 
In the decrypting device 7 generates a signal (data) rep- 

35 resentative of the first key from the first-key base infor- 
mation. The decrypting block in the decrypting device 7 
decrypts the encryption -resultant contents information 
Into the original contents information in response to the 
first-key signal. Thus, the decrypting device 7 reproduc- 

40 es the original contents informatbn. The decrypting de- 
v'tce 7 outputs the reproduced contents infonmation. 
[0069] In the case where the primary section P In- 
cludes the multiplexer, the secondary section Q has a 
demultiplexer which receives the multiplexing- resultant 

45 information from the intermediate section R. The demul- 
tiplexer separates the multiplexing-resultant information 
signal into the algorithm-number information, the initial- 
value information, the encryption-resultant first-key 
base infonmation, and the encryption-resultant contents 

50 information. The demultiplexer feeds the algorithm- 
number information, the initial-value information, the en- 
cryption-resultant first-key base information, and the en- 
cryption-resultant contents information to the memory 
4, the key generator 5, the decrypting device 6, and the 

55 decrypting devtoe 7, respectively. 

[0070] In the case where the primary section P In- 
cludes the signal converters, the secondary section Q 
has inverse signal converters which receive the change- 
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resultant algorithm-number information and the change- 
. resultant initial-value information. The inverse signal 
converters retum the change-resultant algorithm- 
number infomnatlon and the change-resultant initial-val- 
ue Infomnatlon to the original algorithm-number informa- 
tion and the original initial-value information, respective- 
ly. The inverse signal converters feed the the original 
algorithm-number Infomnatlon andthe original initial-val- 
ue Infonnation to the memory 4 and the key generator 
5, respecthfely. 

[0071] Preferably, the secondary side Q is formed by 
an LSI (large-scale integration) circuit having a single 
body. In this case, it is difficult to illegally access the 
memory 4 from an external, 

[0072] in the system of Fig. 1 , since the reference ta- 
ble is provided only in the memory 4 of the secondary 
section Q, it is difficult to make an imitation of the sec- 
ondary side Q (that Is, an illegal machine of t^e second- 
ary side Q) only from knowledge of the primary section 
P. In the event that an illegal machine of the secondary 
side Q is found, the key generation algorithm used by 
the primary side P and the algorithm-number infonna- 
tion transmitted from the primary side P to the secondary 
side Q are changed to make the illegal machine Inoper- 
ative. 

[0073] The embodiment of this invention may be mod- 
ified as follows. Specifically, a modification of the em- 
bodiment of this invention provides M information pieces 
composing information being a base of a first key (a con- 
tents key), where M denotes a predate nn in ed natural 
number In this case, encryption of the first-key base in- 
formation is executed through l\4 stages. The encryp- 
tion-resultant M infonmation pieces are recorded or 
transmitted as the encryption-resultant first-key base in- 
formation. 



Claims 

1 . A method of transmitting contents information , com- 
prising the steps of: 

generating a first-key signal representative of a 
first key from first-key base infonmation being a 
base of the first key; 

encrypting contents information into encryp- 
tion-resultant contents information in response 
to the first-key signal; 

generating a second-key signal representative 
of a second key on the basis of initial-value In- 
fomnation of a given initial value according to a 
predetermined key generation algorithm; 
encrypting the first-key base information into 
encryption-resultant first-key base information 
In response to the second-key signal; and 
transmitting the encryption-resultant contents 
infomnatlon, the encryption -resultant first- key 
base infonmation, the initial-value infonnation. 



and algorithm identification information for 
identifying the predetemnined key generation 
algorithm. 

5 2. A method of recording contents Infonnation, com- 
prising the steps of: 

generating a first- key signal representative of a 
first key from first-key base information being a 
10 base of the first key; 

encrypting contents infonnation into encryp- 
tion-resultant contents infonnation in response 
to the first-key signal; 

generating a second- key signal representative 
IS of a second key on the basis of initial-value in- 

formation of a given Initial value according to a 
predetermined key generation algorithm; 
encrypting the first-key base Information into 
encryption-resultant first-key base information 
20 in response to the second-key signal; and 

recording the encryption-resultant contents in- 
formation, the encryption-resultant first-key 
base infonnation, the initial-value infonnation, 
and algorithm Identification infonnation for 
25 identifying the predetemnined key generation 

algorithm. 

3. An apparatus for transmitting contents information, 
comprising: 

30 

means for generating a first-key signal repre- 
sentative of a first key from first-key base infor- 
mation being a base of the first key; 
means for encrypting contents information into 
35 encryption-resultant contents infonnation in re- 

sponse to the first-key signal; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of in- 
itial-value information of a given initial value ac- 
40 cording to a predetermined key generation al- 

gorithm; 

means for encrypting the first-key base infor- 
mation into encryption-resultant first-key base 
infonnation in response to the second-key sig- 
45 nal; and 

means for transmitting the encryption-resultant 
contents information, the encryption-resultant 
first-key base infonnation, the initial-value in- 
fonnation, and algorithm Identification Informa- 
50 tion for identifying the predetermined key gen- 

eration algorithm. 

4. An apparatus for recording contents Infonnation, 
comprising: 

55 

means for generating a first-key signal repre- 
sentative of a first key from first-key base Infor- 
mation being a base of the first key; 
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means for encrypting contents Infonnation into 
encryption-resultant contents Information in re- 
sponse to the first-key signal; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of in- 5 
itial-value infomnatlon of a given initial value ac- 
cording to a predetemnined key generation al- 
gorithm; 

means for encrypting the first-key base infor- 
mation Into encryption-resultant first-key base io 
Information in response to the second-key sig- 
nal; and 

means for recording the encryption-resultant 
contents information, the encryption-resultant 
first-key base infomriatlon, the Initial-value In- 
fonnation, and algorithm identification informa- 
tion for identifying the predetemnined key gen- 
eration algorithm. 

5. A transmission medium for transmitting encryption- 20 
resultant contents Information, encryption-resultant 
first-key base Information, initial-value information, 
and algorithm identification information, wherein 

the encryption-resultant contents information and 
the encryption-resultant first-key base information 
are generated by the steps of generating a first-key 
signal representative of a first key from first-key 
base information being a base of the first key; en- 
crypting contents Information into encryption-result- 
ant contents information in response to the first-key 3o 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value in- 
formation of a given initial value according to a pre- 
determined key generation algorithm; and encrypt- 
ing the first-key base infomnation Into encryption-re- 55 
sultant first-key base Information In response to the 
second-key signal; and wherein the algorithm iden- 
tification information is for Identifying the predeter- 
mined key generation algorithm. 

40 

6. A recording medium loaded with encryption-result- 
ant contents Information, encryption-resultant first- 
key base Information, Initial-value information, and 
algorithm identification information, wherein the en- 
cryption-resultant contents Infomiation and the en- ^ 
cryption-resultant first-key base infomnation are 
generated by the steps of generating a first-key sig- 
nal represehtathre of a first key from first-key base 
Infomnation being a base of the first key; encrypting 
contents Information into encryption-resultant con- so 
tents information in response to the first-key signal; 
generating a second-key signal representative of a 
second key on the basis of initial-value Information 

of a given initial value according to a predetermined 
key generation algorithm; and encrypting the first- ss 
key base infonmation into encryption-resultant first- 
key base Infomnation In response to the second-key 
signal; and wherein the algorithm identification in- 



fomnation is for identifying the predetemnined key 
generation algorithm. 

7. An apparatus as recited in claim 3. wherein the 
means for generating the second-key signal com- 
prises a linear feedback shift register using a spec- 
ified In-educlble primitive polynomial. 

8. A method of transmitting contents infomnation, com- 
prising the steps of: 

generating a first-key signal representative of a 
first key from first-key base Infonmation being a 
base of the first key; 

encrypting contents Information into encryp- 
tion-resultant contents infomnation In response 
to the first-key signal; 

generating a second-key signal representath/e 
of a second key on the basis of initial-value in- 
formation of a given initial value according to a 
predetemnined key generation algorithm; 
encrypting a part of the first-key base Informa- 
tion in response to the second-key signal to 
convert the first-key base information into en- 
cryption-resultant first-key base infomnation; 
and 

transmitting the encryption-resultant contents 
infomnation, the encryption-resultant first-key 
base Information, the initial-value information, 
and algorithm identification information for 
identifying the predetemnined key generation 
algorithm. 

9. A method of recording contents information, com- 
prising the steps of: 

generating a first-key signal representative of a 
first key from first- key base information being a 
base of the first key; 

encrypting contents Information into encryp- 
tion-resultant contents infomnation in response 
to the first-key signal; 

generating a second-key signal representative 
of a second key on the basis of Initial-value in- 
formation of a given initial value according to a 
predetemnined key generation algorithm; 
encrypting a part of the first-key base informa- 
tion in response to the second-key signal to 
convert the first-key base Information into en- 
cryption-resultant first-key base Infomiation; 
and 

recording the encryption-resultant contents In- 
fonmation, the encryption-resultant first-key 
base information, the initial-value infonmation, 
and algorithm identifteatlon information for 
identifying the predetenmlned key generation 
algorithm. 
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10. An apparatus for transmitting contents information, 
' comprising: 

means for generating a first>l<ey signal repre- 
sentative of a first Icey from f Irst-lcey base Infor- 
mation being a base of the first l<ey; 
means for encrypting contents infomnation into 
encryption-resultant contents information In re- 
sponse to the first-key signal; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of in- 
itial-value information of a given initial value ac- 
cording to a predetemiined key generation al- 
gorithm; 

means for encrypting a part of the first-key base 
information in response to the second-key sig- 
nal to convert the first-key base infonnation into 
encryption-resultant first-key base information; 
and 

means for transmitting the encryption-resultant 
contents infomnation, the encryption-resultant 
first-key base information, the Initial-value in- 
formation, and algorithm identification infonna- 
tion for Identifying the predetermined key gen- 
eration algorithm. 

11. An apparatus for recording contents infonnation, 
comprising: 

means for generating a first-key signal repre- 
sentative of a first key from first-key base infor- 
mation being a base of the first key; 
means for encrypting contents information into 
encryption-resultant contents Infonnation In re- 
sponse to the first-key signal; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of in- 
itial-value information of a given initial value ac- 
cording to a predetermined key generation al- 
gorithm; 

means for encrypting a part of the first-key base 
information in response to the second-key sig- 
nal to convert the first-key base information into 
encryption-resultant first-key base information; 
and 

means for recording the encryption-resultant 
contents information, the encryption-resultant 
first-key base information, the initial-value in- 
formation, and algorithm identification informa- 
tion for identifying the predetermined key gen- 
eration algorithm. 

12. A transmission medium for transmitting encryption- 
resultant contents Information, encryption-resultant 
first-key base Infonnation, initial-value infonnation. 
and algorithm Identification Information, wherein 
the encryption-resultant contents information and 
the encryption-resultant first-key base Information 



are generated by the steps of generating a first-key 
signal representative of a first key from first-key 
base information being a base of the first key; en- 
crypting contents information Into encryption-result- 

5 ant contents infonnation in response to the first-key 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value In- 
formation of a given Initial value according to a pre- 
determined key generation algorithm; and encrypt- 

10 ing a part of the first-key base infonnation in re- 
sponse to the second-key signal to convert the first- 
key base Infonnation into encryption-resultant first- 
key base Infonnation; and wherein the algorithm 
Identification information information Is for Identify- 

15 Ing the predetennined key generation algorithm, 

13. A recording medium loaded with encryption-result- 
ant contente infonnation, encryption-resultant first- 
key base Information, Initial-value Infonnation, and 

20 algorithm identification information, wherein the en- 
cryption-resultant contents information and the en- 
cryption-resultant first-key base infonnation are 
generated by the steps of generating a first-key sig- 
nal representative of a first key from first- key base 
25 infonnation being a base of the first key; encrypting 
contents Information into encryption-resultant con- 
tents information in response to the first-key signal; 
generating a second-key signal representative of a 
second key on the basis of initial-value information 
30 of a given initial value according to a predetermined 
key generation algorithm; and encrypting a part of 
the first-key base information in response to the 
second-key signal to convert the first-key base in- 
formation into encryption-resultant first-key base in- 
35 formation; and wherein the algorithm identification 
information is for identifying the predetermined key 
generation algorithm. 

14. An apparatus as recited in claim 10, wherein the 
40 means for generating the second-key signal com- 
prises a linear feedback shift register using a spec- 
ified in^educible primitive polynomial. 

15. A method of decrypting encryption-resultant con- 
45 tents information generated by an encrypting side 

which Implements the steps of generating a first-key 
signal representative of a first key from first-key 
base informatton being a base of the first key; en- 
crypting contents infonnation Into encryption-result- 
50 ant contents information in response to the first-key 
signal; generating a second- key signal representa- 
tive of a second key on the basis of initial-value in- 
fonnation of a given initial value according to a pre- 
determined key generation algorithm; and encrypt- 
55 ing the first-key base Infonnation into encryption-re- 
sultant first-key base infonnation In response to the 
second-key signal; the method comprising the 
steps of: 
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identifying the predetennined l<ey generation 
algorithm in response to algorithm identification 
infomiatlon for Identifying the predetenmlned 
key generation algorithm; 

generating a second-key signal representative s 
of a second key on the basis of the initiai-vatue 
Infomriatlon and the identified key generation 
algorithm; 

decrypting encryption-resultant first-key base 
infonmatlon Into original first-key base Infomna- io 
tlon in response to the second-key signal; 
generating a first-key signal representative of a 
first key from the original first-key base infonma- 
tlon; and 

decrypting encryption-resultant contents infor- is 
mation Into original contents information in re- 
sponse to the first-key signal. 

16. An apparatus for decrypting encryption-resultant 
contents information generated by an encrypting ^ 
side which Implements the steps of generating a 
first-key signal representative of a first key from 
first-key base infomriation being a base of the first 
key; encrypting contents information into encryp- 
tion-resultant contents information in response to 25 
the first-key signal; generating a second-key signal 
representative of a second key on the basis of ini- 
tial-value information of a given initial value accord- 
ing to a predetermined key generation algorithm; 
and encrypting the first-key base information into 30 
encryption-resultant first-key base information in re- 
sponse to the second-key signal; the apparatus 
comprising: 

means for identifying the predetermined key 35 
generation algorithm in response to algorithm 
identification information for identifying the pre- 
determined key generation algorithm; 
means for generating a second-key signal rep- 
resentative of a second key on the basis of the 
initial-value Infonmatlon and the identified key 
generation algorithm; 

means for decrypting encryption-resultant first- 
key base infonmatlon into original first-key base 
information in response to the second-key sig- ^ 
nal; 

means for generating a first-key signal repre- 
sentative of a first key from the original first-key 
base infonmatlon; and 

means for decrypting encryption-resultant con- so 
tents information into original contents informa- 
tion in response to the first-key signal. 

17. An apparatus as recited in claim 16, wherein the 
identifying means comprises means for selecting S5 
one from among a plurality of key generation algo- 
rithms in response to the algorithm identification in- 
fonmatlon as the identified key generation algo- 



rithm. 

18. An apparatus as recited in claim 17, wherein the 
means for generating the second-key signal com- 
prises a linear feedback shift register having a feed- 
back object position which is set in accordance with 
a primitive polynomial in the identified key genera- 
tion algorithm. 

19. A method of decrypting encryption-resultant con- 
tents Infomriation generated by an encrypting side 
whk:h implements the steps of generating a first-key 
signal representative of a first key from first- key 
base infonmatlon being a base of the first key; en- 
crypting contents infomriation into encryption-result- 
ant contents infomriation in response to the first-key 
signal; generating a second-key signal representa- 
tive of a second key on the basis of initial-value in- 
formation of a given Initial value according to a pre- 
determined key generation algorithm; and encrypt- 
ing a part of the first-key base Infomriation in re- 
sponse to the second-key signal to convert the first- 
key base information into encryption-resultant first- 
key base infomriation; the method comprising the 
steps of: 

identifying the predetemnined key generation 
algorithm in response to algorithm identification 
infomnation for identifying the predetenmlned 
key generation algorithm; 
generating a second-key signal representative 
of a second key on the basis of the initial-value 
infonmation and the identified key generation 
algorithm; 

decrypting encryption-resultant first-key base 
information into original first-key base Informa- 
tion In response to the second-key signal; 
generating a first-key signal representative of a 
first key from the original first-key base Informa- 
tion; and 

decrypting encryption-resultant contents infor- 
mation into original contents infonmation in re- 
sponse to the first-key signal. 

20. An apparatus for decrypting encryption-resultant 
contents Information generated by an encrypting 
side which implements the steps of generating a 
first-key signal representative of a first key from 
first-key base information being a base of the first 
key; encrypting contents infonmation into encryp- 
tion-resultant contents infonmation In response to 
the first-key signal; generating a second-key signal 
representative of a second key on the basis of ini- 
tial-value infonmation of a given Initial value accord- 
ing to a predetenmlned key generation algorithm; 
and encrypting a part of the first-key base Infonma- 
tion in response to the second-key signal to convert 
the first-key base infonmation into encryption-result- 
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ant first-key base information; the apparatus com- 
prising: 

means for identifying the predetennined key 
generation algorithm in response to algorithm 5 
identification Information for Identifying the pre- 
determined key generation algorithm: 
means for generating a second-key signal rep- 
resentative of a second key on the basis of the 
Initial-vaiue information and the Identified key io 
generation algorithm; 

means for decrypting encryption-resultant first- 
key base infomriatlon Into original first-key base 
Infomiation in response to the second-key sig- 
nal; '5 
means for generating a first-key signal repre- 
sentative of a first key from the original first-key 
base information; and 

means for decrypting encryption-resultant con- 
tents Information into original contents Informa- 20 
tion In response to the first-key signal. 

21. An apparatus as recited in claim 20, wherein the 
identifying nneans comprises means for selecting 
one from among a plurality of key generation algo- 
rithms in response to the algorithm identification in- 
formation as the identified key generation algo- 
rithm. 

22. An apparatus as recited in claim 21, wherein the 30 
means for generating the second-key signal com- 
prises a linear feedback shift register having a feed- 
back object position which is set in accordance with 

a primitive polynomial in the identified key genera- 
tion algorithm. ^5 
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mation for Identifying the predetermined key generation 
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